4 Commits

This Branch

This Branch

All Branches

Author	SHA1	Message	Date
sneak	af88877245	Lock DATA_DIR against a second instance (closes #201) ... Nothing stopped two processes opening the same DATA_DIR. Both open the same per-webhook databases, both run delivery recovery over the same rows, and both deliver: every pending delivery reaches the destination twice, from nothing worse than an overlapping deploy. The entry point now takes an exclusive advisory flock(2) on {DATA_DIR}/webhooker.lock before anything opens a database, and holds it for the process lifetime. A second process pointed at the same directory prints a message naming that directory and exits 1. The lock is the kernel's, not the file's, so a process killed with SIGKILL leaves a lock file that blocks nothing -- which is what a pidfile would get wrong. The file is never unlinked: doing so would let the next process lock a fresh inode while a third still held the old one. Acquisition lives in internal/datadir rather than in the server's fx graph, so any entry point touching DATA_DIR takes it the same way, and ErrLocked lets a caller tell a live deployment from any other failure. config.DataDir() resolves DATA_DIR once, for both the lock and Config, so the two cannot disagree. Regression coverage: a real second process is refused, and a restart after kill -9 succeeds with the stale lock file in place. github.com/gofrs/flock carries the lock; its own module minimums pull testify to v1.11.1 and golang.org/x/sys to v0.37.0.	2026-08-20 04:57:10 +00:00
sneak	2cc8723997	scripts-to-rule-them-all (#59) ... Reviewed-on: #59 Co-authored-by: sneak <sneak@sneak.berlin> Co-committed-by: sneak <sneak@sneak.berlin>	2026-07-07 02:14:09 +02:00
sneak	e0b1e7cf54	Restore TODO.md and move TODO content out of README (#58) ... Reviewed-on: #58 Co-authored-by: sneak <sneak@sneak.berlin> Co-committed-by: sneak <sneak@sneak.berlin>	2026-07-06 21:14:03 +02:00
sneak	1244f3e2d5	initial	2026-03-01 22:52:08 +07:00